Rocket.Chat 8.5.2
Patch release with security hotfixes, permission checks for token generation and room operations, and updated dependencies. Engine versions updated to Node 22.22.3, Deno 2.3.1, MongoDB 8.0, and Apps-Engine 1.63.0.
Engine versions
- Node:
22.22.3 - Deno:
2.3.1 - MongoDB:
8.0 - Apps-Engine:
1.63.0
Patch Changes
-
Bump @rocket.chat/meteor version.
-
Bump @rocket.chat/meteor version.
-
(#41235 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
-
(#41244 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
-
(#41293 by @dionisio-bot) Ensures the
users.CreateTokenendpoint checks for theuser-generate-access-tokenpermission when generating a login token for another user -
(#41277 by @dionisio-bot) Ensures room permission checks are applied consistently regardless of how the room is identified when converting a channel to a team or creating a team from an existing room
-
Updated dependencies [ac29d8a]:
- @rocket.chat/core-typings@8.5.2
- @rocket.chat/model-typings@2.3.1
- @rocket.chat/models@2.3.1
- @rocket.chat/rest-typings@8.5.2
Source: original entry ↗